fix: hashlib.sha1 FIPS crash in tui_gateway/server.py and optional-skills/dossier.py

optional-skills/security/unbroker/scripts/dossier.py

@@ -22,7 +22,7 @@ def now() -> str:
 def new_subject_id(full_name: str = "") -> str:
     # Opaque id: derives NOTHING from the name, so PII never leaks into directory names,
     # case ids, drafts, or the audit log. full_name kept only for call compatibility.
-    return "sub_" + hashlib.sha1(os.urandom(8)).hexdigest()[:10]
+    return "sub_" + hashlib.sha1(os.urandom(8), usedforsecurity=False).hexdigest()[:10]
 
 
 def create(identity: dict, consent: dict, residency: str = "US", prefs: dict | None = None) -> dict:

tui_gateway/server.py

@@ -11674,7 +11674,7 @@ def _compute_mcp_rev() -> str:
             sort_keys=True,
             default=str,
         )
-        return hashlib.sha1(rev_src.encode()).hexdigest()[:12]
+        return hashlib.sha1(rev_src.encode(), usedforsecurity=False).hexdigest()[:12]
     except Exception:
         return ""